{
  "id": "definition:kradle-policy-model",
  "_kind": "Definition",
  "_file": "domain/products/kradle.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Kradle Policy Resource Model",
    "authoredAt": "2026-05-10T00:00:00Z",
    "text": "The resource kinds governing policy enforcement within Kradle,\nimplemented via Kyverno and custom admission webhooks:\n\nPolicyProfile: Org-scoped bundle of policies applied to all\n  resources within an organization. Profiles compose multiple\n  PolicyTemplates with org-specific parameter values.\nPolicyTemplate: Reusable, parameterized policy definition.\n  Templates are cluster-scoped and can be shared across orgs.\n  Examples: allowed-container-registries, required-labels,\n  resource-quota-limits, agent-tool-allowlist.\nPolicyBinding: Associates a PolicyTemplate with a target scope\n  (org, team, repo, or agent stack) and supplies parameter values.\nPolicyException: Temporary or permanent exemption from a specific\n  policy for a specific resource. Requires org-admin approval and\n  has an optional expiry.\nAdmissionPolicy: Low-level Kyverno ClusterPolicy wrapper that\n  Kradle generates from PolicyProfile/PolicyTemplate combinations.\n  Not typically created directly by users.\n\nPolicies are enforced at admission time (blocking non-compliant\nresource creation) and via background scanning (reporting existing\nresources that violate newly applied policies).\n",
    "status": "canonical"
  },
  "outgoingEdges": [
    {
      "from": "definition:kradle-policy-model",
      "to": "domain:platform-engineering",
      "kind": "applies_to"
    },
    {
      "from": "definition:kradle-policy-model",
      "to": "domain:security",
      "kind": "applies_to"
    },
    {
      "from": "definition:kradle-policy-model",
      "to": "tool:kubernetes",
      "kind": "supports"
    },
    {
      "from": "definition:kradle-policy-model",
      "to": "tool:kyverno",
      "kind": "supports"
    },
    {
      "from": "definition:kradle-policy-model",
      "to": "skill-area:policy-as-code",
      "kind": "supports"
    },
    {
      "from": "definition:kradle-policy-model",
      "to": "skill-area:platform-engineering",
      "kind": "supports"
    }
  ],
  "incomingEdges": []
}